)]}'
{"id":"openstack%2Fkeystone~694096","triplet_id":"openstack%2Fkeystone~stable%2Fqueens~If1bf5bd785a494923303265797311d42018ba7af","project":"openstack/keystone","branch":"stable/queens","hashtags":[],"change_id":"If1bf5bd785a494923303265797311d42018ba7af","subject":"Allows to use application credentials through group membership","status":"MERGED","created":"2019-11-13 15:31:41.000000000","updated":"2019-11-14 17:06:50.000000000","submitted":"2019-11-14 17:04:47.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"694096-1573751087431-ee4c743d","meta_rev_id":"18bf9ee31abc4b29417d1d4e3b1dc55947e57646","_number":694096,"virtual_id_number":694096,"owner":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},{"value":0,"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},{"value":0,"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"_account_id":1955,"name":"Alan Pevec","email":"alan.pevec@redhat.com","username":"apevec"},{"value":0,"_account_id":5575,"name":"Jose Castro Leon","email":"jose.castro.leon@cern.ch","username":"jose-castro-leon"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2019-11-14 17:04:47.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},"all":[{"value":2,"date":"2019-11-14 15:27:06.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},{"value":0,"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},{"value":1,"date":"2019-11-14 15:02:15.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":2,"date":"2019-11-14 08:15:57.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":1955,"name":"Alan Pevec","email":"alan.pevec@redhat.com","username":"apevec"},{"value":0,"_account_id":5575,"name":"Jose Castro Leon","email":"jose.castro.leon@cern.ch","username":"jose-castro-leon"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},"all":[{"value":1,"date":"2019-11-14 15:27:06.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},{"value":0,"date":"2019-11-13 15:31:41.000000000","_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},{"value":0,"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"_account_id":1955,"name":"Alan Pevec","email":"alan.pevec@redhat.com","username":"apevec"},{"value":0,"date":"2019-11-13 15:31:41.000000000","_account_id":5575,"name":"Jose Castro Leon","email":"jose.castro.leon@cern.ch","username":"jose-castro-leon"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":1955,"name":"Alan Pevec","email":"alan.pevec@redhat.com","username":"apevec"},{"_account_id":5575,"name":"Jose Castro Leon","email":"jose.castro.leon@cern.ch","username":"jose-castro-leon"},{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2019-11-13 15:31:41.000000000","updated_by":{"_account_id":5575,"name":"Jose Castro Leon","email":"jose.castro.leon@cern.ch","username":"jose-castro-leon"},"reviewer":{"_account_id":5575,"name":"Jose Castro Leon","email":"jose.castro.leon@cern.ch","username":"jose-castro-leon"},"state":"REVIEWER"},{"updated":"2019-11-13 15:31:41.000000000","updated_by":{"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},"reviewer":{"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},"state":"REVIEWER"},{"updated":"2019-11-14 08:15:57.000000000","updated_by":{"_account_id":1955,"name":"Alan Pevec","email":"alan.pevec@redhat.com","username":"apevec"},"reviewer":{"_account_id":1955,"name":"Alan Pevec","email":"alan.pevec@redhat.com","username":"apevec"},"state":"REVIEWER"},{"updated":"2019-11-14 15:02:15.000000000","updated_by":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"reviewer":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"state":"REVIEWER"},{"updated":"2019-11-14 15:27:06.000000000","updated_by":{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},"reviewer":{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},"state":"REVIEWER"},{"updated":"2019-11-14 17:04:47.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"a9d6362dca7acdaed9cbd3f37a634fe83669e832","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2019-11-13 15:31:41.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"13c2cf20dc02cdda34847a89be4bde7546e314d1","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-11-13 19:04:09.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/a2b87fde6d954160a61eb66d1c3b4d9c : SUCCESS in 9m 36s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/5f27a319a73a4d9da2bf57f7da23e6f7 : SUCCESS in 18m 24s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/d0cfeba5f49445508135df33ba42b6f0 : SUCCESS in 16m 57s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/3f33168da01b4e6c9925af130990d9ad : SUCCESS in 8m 56s\n- tempest-full https://zuul.opendev.org/t/openstack/build/a8087f82b6b14dea9ef5c5698451e60f : SUCCESS in 1h 16m 29s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/9e550b20684c4f258e7ebd6b3919e1a3 : SUCCESS in 54m 44s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/6b806b6ef3d048008d03b70fd5bb449e : SUCCESS in 1h 14m 18s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/5aac3fe1ee5e40338ba94247a6da67c0 : SUCCESS in 20m 00s\n- keystone-dsvm-functional https://zuul.opendev.org/t/openstack/build/2482e4eddf224fcc8a49af21313d5115 : SUCCESS in 35m 10s\n- keystone-dsvm-functional-v3-only https://zuul.opendev.org/t/openstack/build/937a8374309e41d29db96231e43e6d25 : FAILURE in 30m 26s (non-voting)\n- keystone-dsvm-py35-functional-v3-only https://zuul.opendev.org/t/openstack/build/4db3b2514bad4fafaf6ef0de81124092 : FAILURE in 29m 12s (non-voting)\n- openstack-ansible-keystone-rolling-upgrade https://zuul.opendev.org/t/openstack/build/64d82422f277446d9efdcb64d77808c2 : FAILURE in 5m 01s (non-voting)\n- legacy-keystoneclient-dsvm-functional https://zuul.opendev.org/t/openstack/build/8d2409b772b7428cacd8811ba3e580a1 : SUCCESS in 30m 21s (non-voting)\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/baf9530189734fcd926312e70ca5d5cd : SUCCESS in 17m 23s\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/d66d4d3ed9db4ff19d88fa2e3faab0c9 : SUCCESS in 44m 58s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"d60e348b56fb8e814f6bb5624e3307e4fb0826cc","author":{"_account_id":1955,"name":"Alan Pevec","email":"alan.pevec@redhat.com","username":"apevec"},"date":"2019-11-14 08:15:57.000000000","message":"Patch Set 1: Code-Review+2\n\nthis change is local and fixes a clear bug,\ndoes not break https://docs.openstack.org/project-team-guide/stable-branches.html#review-guidelines\n\nRisk of code divergence is covered by the test.","accounts_in_message":[],"_revision_number":1},{"id":"857d7b98f4936f0a6e09a916f848551af5e7d0fb","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2019-11-14 15:02:15.000000000","message":"Patch Set 1: Code-Review+1","accounts_in_message":[],"_revision_number":1},{"id":"ea47fda33e542004f1e98a10eaff7b9460ff2766","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2019-11-14 15:03:21.000000000","message":"Patch Set 1:\n\nLooks equivalent to the original to me, fixes a major bug that affects many users.","accounts_in_message":[],"_revision_number":1},{"id":"6d00c84a41e73797c6941048dd90545d3f4543d8","author":{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},"date":"2019-11-14 15:27:06.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1\n\nMerged to later branches. Conflict handling appears to be all good, and this is good to get backported.","accounts_in_message":[],"_revision_number":1},{"id":"d262729bbf740f7cc38b0128f8b865d9a38dff82","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-11-14 15:27:21.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"7ad4c7d6c10e61908978779c7a1f6e33c0fb8284","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-11-14 17:04:47.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/945c6b526fda4d1e97b4f40639e864eb : SUCCESS in 8m 05s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/52c1bfb6a4c94ea9a37f5374affd9dbd : SUCCESS in 38m 28s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/0abe11e787c542208014e6fb8c7c42cc : SUCCESS in 23m 33s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/55a0ccdc2d3e4530a675edd21d3a5360 : SUCCESS in 9m 51s\n- tempest-full https://zuul.opendev.org/t/openstack/build/71b4be523bbd4358b27a66be09e93f17 : SUCCESS in 1h 31m 03s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/4bfbbc3e4d5c4ab7872b9c9a1d517bfd : SUCCESS in 55m 16s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/768a33fe5f8242a4b2ef4734ff2ef5ab : SUCCESS in 1h 14m 54s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/17f33be4e5ae49709866f10ab5aa1d7b : SUCCESS in 19m 16s\n- keystone-dsvm-functional https://zuul.opendev.org/t/openstack/build/d1af603e7107495b8b108fc096711954 : SUCCESS in 35m 11s","accounts_in_message":[],"_revision_number":1},{"id":"d363035549ea8d4efcf3d714012f421bab3912c9","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-11-14 17:04:47.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":1},{"id":"18bf9ee31abc4b29417d1d4e3b1dc55947e57646","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-11-14 17:06:50.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\n\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/98ee7b40fe81419ea67e2848969c84e7 : SUCCESS in 1m 21s","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"578be15629a84d1edcfda546a93b7ccbb6959720","revisions":{"578be15629a84d1edcfda546a93b7ccbb6959720":{"kind":"REWORK","_number":1,"created":"2019-11-13 15:31:41.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/96/694096/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/96/694096/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/96/694096/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/96/694096/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/96/694096/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/96/694096/1"}}},"commit":{"parents":[{"commit":"e8b04cc4265d672214da50b99ead8c4f8cc49aa2","subject":"Revert \"Fix python3 compatibility on LDAP search DN from id\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/e8b04cc4265d672214da50b99ead8c4f8cc49aa2"}]}],"author":{"name":"Jose Castro Leon","email":"jose.castro.leon@cern.ch","date":"2019-04-23 13:38:16.000000000","tz":120},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2019-11-13 15:28:46.000000000","tz":0},"subject":"Allows to use application credentials through group membership","message":"Allows to use application credentials through group membership\n\nWhen using role assignment through groups, the user cannot use\nthe application credentials created. This allows to look up\nthe membership by checking inherited and group assignments.\n\nConflicts:\n    This change conflicts with newer branches because most of the\n    logic in keystone/token/providers/common.py was refactored into\n    keystone/models/token_model.py during the Rocky release. This\n    refactor causes the stable/queens version to diverge from\n    stable/rocky, stable/stein, and stable/train patches, although it\n    is functionally equivalent to the approach used in later releases.\n\nChange-Id: If1bf5bd785a494923303265797311d42018ba7af\nCloses-Bug: #1773967\n(cherry picked from commit 14b25bc5d18842210cfffe1afdca475e848b84aa)\n(cherry picked from commit 933ea511d150ed2cbbd4265fc7513a9b3435baa2)\n(cherry picked from commit cf83fc10569e7b52eeb52c0e164dfe36daeec309)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/578be15629a84d1edcfda546a93b7ccbb6959720"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/578be15629a84d1edcfda546a93b7ccbb6959720"}]},"branch":"refs/heads/stable/queens"}},"requirements":[],"submit_records":[],"submit_requirements":[]}